Fetching Spring beans with a string name is deprecated.
Added Spring Security.
Users are authenticated against database.
Merge branch 'auth'